Network Security

Hey Everyone,I was wondering what would be the ideal performance for placing the DMZs on either a physical interface or logical interface. We are using ASA 5550s, the outside is setup on GIG 0/0 and the inside is setup on GIG 1/0 for optimal performa...

Hi,iam having problems accessing ip addresses from the subnet (WAN):portmap translation creation failed for tcp src inside:172.21.4.21/4527 dst outside:192.109.XXX.XXX/443This happens only to this range 192.109.X.X there is no special routing/acl/nat...

On an ASA 5505 I receive the following syslog ID 199010, severity = 1:When doing any packet capture in the ASDM wizard. Signal 11 caught in process/fiber (Unicorn Admin Handler)/(NULL) at address 0x8a7aaf6d, corrective action at 0x0The error appears ...

We have two areas of public IP addresses. Both are configured in the ASA5510 (7.2.4, failover A/S, functions: VPN-Server, VPN L2L, SSL-VPN, Firewall, NAT)): interface Ethernet0/0.100 description ### Path A ### vlan 100 nameif outside-1 security-level...

Dear Sir,The following acl is applied to the asa inside interface.access-list 100 permit tcp host 192.168.0.1 any eq 5017access-list 100 deny ip any anyaccess-group 100 in interface inside.Netstat in windows command prompt shows that the connection o...

Hello, I have 2 PIX 525 running version 7.2(1). I have it setup a serial cable failover. The problem is when I run a show fail command it list that the outside interface is up and running and failover is working fine. but on the other 2 interfaces, i...

Hi,I have the following scenario: Outside | ASA--DMZ (valid IP range/28) | Inside (10.0.0.0/20) I need to set up the ASA so that traffic originating from a DMZ host, with destination being the ASA's outside IP address and port 25/tcp, will be redirec...

we are trying to implement per user split tunneling using ACS. In the past attribute ipsec-split-tunnel-list was used for ipsec clients and that works fine. Tested with any connect and this attribute does not appear to work. Questions:Is this attribu...

Hello,i have installed and configured 2 ASA5510 in failover (Active/Standby) and everything work fine, when the primary unit(active) fails, the secondary unit(Standby) assumes the role of active, however, when the primary unit (standby) returns to it...

Has anyone used Flexible Packet Matching (FPM) to block access to proxy servers?

If I issued "show threat-detection rate"I dont know what is different between Trigger and Event(Average(eps) and Current(eps))?How are measure and increment both parameters??I read all documentation but I still understand this topic.

Hello,On my ASA I have this rule, is it a default rule as I have never added this myself:access-list outside_mpc extended permit ip any anyThanks

Hi all,I have read through countless posts on my question and have gleaned a lot of information from them.My scenario is this.We have a 6500 core connected to two ASA's in active/standby mode. The ASAs are connected to two 3550 switches which are pro...